Remote code execution

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

UBUNTU-CVE-2023-0139

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2022-4429 Avira Security for Windows - Denial of Service

Avira Security for Windows contains an unquoted service path which allows attackers with local administrative privileges to cause a Denial of Service. The issue was fixed with Avira Security version 1.1.78...

CVE-2022-4294 Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or us...

PT-2023-1162 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Event Tracing service, which can allow an attacker to gain unauthorized access to protected information. This...

PT-2023-1230 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a cryptographic information disclosure in Windows operating systems, allowing an attacker to disclose protected information. This could enable an attacker to gain...

PT-2023-1158 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a cryptographic information disclosure in Windows operating systems, which could allow an attacker to reveal protected information. This may enable the attacker to...

EUVD-2023-25841

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

AVG Technologies AVG Antivirus 安全漏洞

AVG Technologies AVG Antivirus is a suite of antivirus software from the Czech company AVG Technologies. A security vulnerability exists in AVG Antivirus for Windows. An attacker exploiting this vulnerability could attempt to compromise a software application in order to gain elevated access...

PT-2023-1092 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Microsoft Cryptographic Services. It allows an attacker to elevate their privileges. Recommendations: At the moment,...

PT-2023-1045 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Microsoft Windows, specifically involving the use of memory after it has been freed. This can be exploit...

VulnCheck KEV: CVE-2023-21674

Microsoft Windows Advanced Local Procedure Call ALPC contains an unspecified vulnerability that allows for privilege escalation...

Avira Security 代码问题漏洞

Avira Security is a software suite from the German company Avira. It includes antivirus protection, ransomware protection, and more. A security vulnerability exists in Avira Security for Windows that originates from the inclusion of an unreferenced service path, resulting in a denial of service...

ISC BIND DoS Vulnerability (CVE-2012-5689) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...

CVE-2022-34681

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler, where improper input validation of a display-related data structure may lead to denial of service...

PT-2022-22285 · Nvidia · Nvidia Control Panel

Name of the Vulnerable Software and Affected Versions: NVIDIA Control Panel for Windows affected versions not specified Description: The issue allows an unauthorized user or an unprivileged regular user to compromise the security of the software by gaining privileges, reading sensitive informatio...

PT-2022-7675 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the FASTFAT component of the Windows operating system. This could allow an attacker to read data from remote files on the operating system by...

CVE-2022-34478

The ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt. These applications have had known vulnerabilities, exploited in the wild although we know of none exploited through Thunderbird, so in this release...